CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

Cross site scripting

Softing TH SCOPE through 3.70 allows XSS...

Softing TH SCOPE Security Vulnerability

Softing TH SCOPE is a software application for industrial network management and network diagnostics from Softing Germany. A security vulnerability exists in Softing TH SCOPE version 3.70 and earlier versions. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

CVE-2023-37571: Improper Neutralization of Input During Web Page Generation

Softing TH SCOPE through 3.70 allows XSS...

PT-2024-12639

Name of the Vulnerable Software and Affected Versions Softing TH SCOPE versions prior to 3.71 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

CVE-2023-37571

CVE-2023-37571 concerns a XSS vulnerability in Softing TH SCOPE (through version 3.70). The vulnerability allows an attacker to inject or execute script within the context of the affected application, with the CVSS v3.1 score of 6.1 (MEDIUM). Attack vector is NETWORK, but exploitation requires us...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

CVE-2023-6110

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials...

OpenStack Security Vulnerabilities

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA. OpenStack has a security vulnerability that stems from the fact that when a user tries to remove an access rule that does not exist in its scope, it removes other existing access rules that...

PT-2024-15817 · Unknown · Hongmaple Octopus +1

Name of the Vulnerable Software and Affected Versions: hongmaple octopus version 1.0 biantaibao octopus version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /system/role/list. The manipulation of the dataScope argument leads to sql injection. It is...

serenity:FuzzWAVLoader: Stack-use-after-scope in Audio::WavLoaderPlugin::load_wav_info_block

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5817297356783616 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzWAVLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-use-after-scope READ 4 Crash Address:...

CVE-2024-20928

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content...

CVE-2024-20920

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

Buffer overflow

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced UI. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2024-20906: Undefined Security Weakness

Vulnerability in the Integrated Lights Out Manager ILOM product of Oracle Systems component: System Management. Supported versions that are affected are 3, 4 and 5. Easily exploitable vulnerability allows high privileged attacker with network access via ICMP to compromise Integrated Lights Out...

EDX Open edX Access Control Error Vulnerability

EDX Open edX is an online learning management system from EDX Corporation. An Access Control Error vulnerability exists in Open edX Platform, which stems from the fact that a user with JWT and limited scope can invoke an endpoint that exceeds their access privileges...

GHSA-8G9C-28FC-MCX2 Duplicate Advisory: Microsoft Identity Denial of service vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-59j7-ghrg-fj52. This link is maintained to preserve external references. Original Description Impact An attacker could exploit this vulnerability by crafting a malicious JSON Web Encryption JWE token with a high...

Duplicate Advisory: Microsoft Identity Denial of service vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-59j7-ghrg-fj52. This link is maintained to preserve external references. Original Description Impact An attacker could exploit this vulnerability by crafting a malicious JSON Web Encryption JWE token with a high...